[ 73.989072][ T27] audit: type=1400 audit(1575618200.880:37): avc: denied { watch } for pid=9450 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 74.026855][ T27] audit: type=1400 audit(1575618200.920:38): avc: denied { watch } for pid=9450 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.278158][ T27] audit: type=1800 audit(1575618201.170:39): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 74.300280][ T27] audit: type=1800 audit(1575618201.170:40): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 78.006201][ T27] audit: type=1400 audit(1575618204.900:41): avc: denied { map } for pid=9538 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. [ 84.526554][ T27] audit: type=1400 audit(1575618211.420:42): avc: denied { map } for pid=9550 comm="syz-executor941" path="/root/syz-executor941858194" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 84.556360][ T9551] IPVS: ftp: loaded support on port[0] = 21 executing program [ 84.585259][ T27] audit: type=1400 audit(1575618211.480:43): avc: denied { create } for pid=9551 comm="syz-executor941" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 84.603109][ T3674] BUG: unable to handle page fault for address: fffff52000600000 [ 84.610526][ T27] audit: type=1400 audit(1575618211.480:44): avc: denied { write } for pid=9551 comm="syz-executor941" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 84.617768][ T3674] #PF: supervisor read access in kernel mode [ 84.617774][ T3674] #PF: error_code(0x0000) - not-present page [ 84.617781][ T3674] PGD 21ffee067 P4D 21ffee067 PUD aa51c067 PMD a7c4f067 PTE 0 [ 84.642783][ T27] audit: type=1400 audit(1575618211.480:45): avc: denied { read } for pid=9551 comm="syz-executor941" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 84.648321][ T3674] Oops: 0000 [#1] PREEMPT SMP KASAN [ 84.648335][ T3674] CPU: 1 PID: 3674 Comm: ion_system_heap Not tainted 5.4.0-syzkaller #0 [ 84.648342][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.648367][ T3674] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 84.716141][ T3674] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 84.736263][ T3674] RSP: 0018:ffffc9000c5f7ab8 EFLAGS: 00010212 [ 84.742318][ T3674] RAX: fffff52000600000 RBX: fffff52000601600 RCX: ffffffff85dd9ce9 [ 84.750267][ T3674] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffffc90003000000 [ 84.758232][ T3674] RBP: ffffc9000c5f7ad0 R08: fffff52000601600 R09: 0000000000001600 [ 84.766183][ T3674] R10: fffff520006015ff R11: ffffc9000300afff R12: fffff52000600000 [ 84.774132][ T3674] R13: 000000000000b000 R14: 0000000000000000 R15: ffffc9000c5f7d08 [ 84.782083][ T3674] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 84.790989][ T3674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.797587][ T3674] CR2: fffff52000600000 CR3: 000000000986d000 CR4: 00000000001406e0 [ 84.805535][ T3674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.813486][ T3674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.821430][ T3674] Call Trace: [ 84.825127][ T3674] memset+0x24/0x40 [ 84.828915][ T3674] ion_heap_clear_pages+0x49/0x70 [ 84.834004][ T3674] ion_heap_sglist_zero+0x245/0x270 [ 84.839179][ T3674] ? ion_heap_deferred_free+0x630/0x630 [ 84.844706][ T3674] ? mark_lock+0xc2/0x1220 [ 84.849112][ T3674] ? __kasan_check_read+0x11/0x20 [ 84.854116][ T3674] ? __lock_acquire+0x16f2/0x4a00 [ 84.859118][ T3674] ? finish_wait+0x18c/0x260 [ 84.863684][ T3674] ? find_held_lock+0x35/0x130 [ 84.868439][ T3674] ? ion_heap_deferred_free+0x295/0x630 [ 84.873966][ T3674] ? pgprot_writecombine+0x5e/0xf0 [ 84.879058][ T3674] ? pagerange_is_ram_callback+0x130/0x130 [ 84.884951][ T3674] ? ion_heap_deferred_free+0x295/0x630 [ 84.890485][ T3674] ion_heap_buffer_zero+0xf5/0x150 [ 84.895581][ T3674] ion_system_heap_free+0x1eb/0x250 [ 84.900817][ T3674] ion_buffer_destroy+0x159/0x2d0 [ 84.905825][ T3674] ion_heap_deferred_free+0x29d/0x630 [ 84.911222][ T3674] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 84.916578][ T3674] ? trace_hardirqs_on+0x67/0x240 [ 84.921582][ T3674] ? finish_wait+0x260/0x260 [ 84.926157][ T3674] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 84.932382][ T3674] ? __kthread_parkme+0x108/0x1c0 [ 84.937387][ T3674] ? __kasan_check_read+0x11/0x20 [ 84.942405][ T3674] kthread+0x361/0x430 [ 84.946468][ T3674] ? ion_heap_shrink_scan+0x1d0/0x1d0 [ 84.951910][ T3674] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 84.957621][ T3674] ret_from_fork+0x24/0x30 [ 84.962017][ T3674] Modules linked in: [ 84.965898][ T3674] CR2: fffff52000600000 [ 84.970038][ T3674] ---[ end trace d53259fe421a6c0b ]--- [ 84.975483][ T3674] RIP: 0010:check_memory_region+0x9c/0x1a0 [ 84.981275][ T3674] Code: c9 4d 0f 49 c1 49 c1 f8 03 45 85 c0 0f 84 10 01 00 00 41 83 e8 01 4e 8d 44 c0 08 eb 0d 48 83 c0 08 4c 39 c0 0f 84 a7 00 00 00 <48> 83 38 00 74 ed 4c 8d 40 08 eb 09 48 83 c0 01 49 39 c0 74 53 80 [ 85.001027][ T3674] RSP: 0018:ffffc9000c5f7ab8 EFLAGS: 00010212 [ 85.007076][ T3674] RAX: fffff52000600000 RBX: fffff52000601600 RCX: ffffffff85dd9ce9 [ 85.015027][ T3674] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffffc90003000000 [ 85.022979][ T3674] RBP: ffffc9000c5f7ad0 R08: fffff52000601600 R09: 0000000000001600 [ 85.030930][ T3674] R10: fffff520006015ff R11: ffffc9000300afff R12: fffff52000600000 [ 85.038879][ T3674] R13: 000000000000b000 R14: 0000000000000000 R15: ffffc9000c5f7d08 [ 85.046831][ T3674] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 85.055752][ T3674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.062342][ T3674] CR2: fffff52000600000 CR3: 000000000986d000 CR4: 00000000001406e0 [ 85.070356][ T3674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.078319][ T3674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.086373][ T3674] Kernel panic - not syncing: Fatal exception [ 85.093845][ T3674] Kernel Offset: disabled [ 85.098171][ T3674] Rebooting in 86400 seconds..